CVE-2009-2928

MEDIUM 4.3CVE-2009-2928 · Published 21/08/2009 · updated 16/06/2026

In short

CVE-2009-2928 is a MEDIUM (CVSS 4.3) vulnerability affecting tgs content management (tgs-cms).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tgs content management tgs-cms	`= 0.1.6= 0.1.7= 0.2.0= 0.2.5= 0.3.0= 0.3.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

References

exploit-db.com/exploits/9434
exchange.xforce.ibmcloud.com/vulnerabilities/52481

CVE-2009-2928

In short

Description

References

More vulnerabilities in tgs content management

CVE-2009-2928

In short

Description

References

More vulnerabilities in tgs content management